American agricultural dealer wants your Mercury bill paid.

A highly convincing phishing campaign impersonating Mercury has been detected targeting New Zealand organisations.

Technical analysis indicates a surge in New Zealand inboxes receiving messages that claim an "Auto-Payment Unsuccessful" event. The lure pressures users into clicking a link to update their payment details, leading to a credential-harvesting site designed to collect corporate credit card data.

Source: Direct Analysis of Local Phishing Lure

Email authorisation

SPF

none

DKIM

none

DMARC

none

COMPAUTH

fail

Domain authentication

Sender / From domain

blog.shankslawn.com

Newly registered domain

0 days old

Email Sample

Source

Internal data